EU opens formal investigation into Booking.com for fraud, phishing and ad‑transparency breaches

The European Commission launched formal proceedings on 21 October 2026 to examine whether Booking.com has failed to meet its Digital Services Act obligations. Regulators will assess the platform’s handling of fraudulent listings, phishing scams that exploit reservation data, and the transparency of paid‑for boosted listings. The probe follows a reported ten‑fold rise in fraud cases, with 1,072 notifications and about €82,000 in losses recorded in the first half of 2026.

The Commission can impose fines of up to 6 % of Booking Holdings’ global annual turnover if violations are confirmed, creating regulatory risk for the company’s earnings. The investigation also adds uncertainty to the platform’s compliance costs and may affect investor sentiment in the near term.

  • 1The Commission opened formal proceedings on 21 October 2026 to investigate potential breaches of the Digital Services Act.
  • 2The inquiry will focus on fraudulent and non‑compliant listings, phishing scams that use reservation and guest data, and the transparency of paid‑for boosted listings.
  • 3Dutch regulators recorded a ten‑fold increase in fraud cases in 2026, with 1,072 notifications of fraud in the first half of the year.
  • 4Those Dutch‑reported fraud cases resulted in losses of roughly €82,000.
  • 5If the Commission finds violations, Booking.com could face fines of up to 6 % of its global annual revenue.

Sources